Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: 66yvop14mhajrKfgIbp7s7s7gNZ3623wzgXqz04Y5M4=
Subject key identifier: 9C:81:4E:34:0F:B6:22:42:CB:94:39:AB:B0:64:E9:3D:E5:05:2C:14
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0196545C5A86939CE7E0A5E6096BE2E70817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0614
Signing time: Sun 20 Apr 2025 18:01:00 +0000
Manifest this update: Sun 20 Apr 2025 18:01:00 +0000
Manifest next update: Mon 21 Apr 2025 18:01:00 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: p2tbuRakvI9d9kn8EO2KC+htEdvwjQ8H6bfO3yDkZc8=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:5a:86:93:9c:e7:e0:a5:e6:09:6b:e2:e7:08:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Apr 20 18:01:00 2025 GMT
Not After : Apr 21 18:01:00 2025 GMT
Subject: CN=9c814e340fb62242cb9439abb064e93de5052c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:05:0c:ec:e2:5b:75:dd:b0:05:16:1a:4a:
02:b6:ae:bf:51:13:ff:3e:24:10:80:54:22:57:fd:
44:c4:0a:16:84:ba:4b:39:27:cb:1f:31:5c:63:48:
e4:df:9f:90:93:12:fb:57:6b:7c:f5:21:d0:22:d2:
da:89:9d:14:07:bd:6a:98:cb:12:9c:b4:b1:ea:50:
ab:11:96:4f:4d:a9:32:23:d3:fa:e7:8b:d7:f9:b0:
b1:96:0d:ee:e5:2c:35:5f:17:9f:22:81:c2:89:f5:
1f:08:14:64:8e:c5:ad:c0:15:e1:5b:99:7e:d9:42:
a5:c9:09:2c:eb:3e:ee:d8:d1:a0:95:86:63:55:15:
9a:6b:ea:31:8d:9c:26:d3:d2:79:2c:06:a4:11:45:
7e:94:40:ae:f4:6c:53:4d:ab:9d:57:2e:11:78:ef:
00:34:86:b8:5f:2c:04:5b:7e:e4:f3:29:e7:23:02:
d0:d4:30:cd:3f:18:29:14:a9:24:ee:b5:7e:a8:3c:
77:56:11:4d:35:2c:b1:07:80:fb:08:4c:34:4a:7a:
93:07:48:5f:e3:83:bb:b6:fe:30:89:fe:2c:08:61:
0c:7d:a2:68:48:28:be:79:98:87:30:cc:21:0a:f9:
36:71:64:8e:f7:81:f8:55:af:d5:f9:a7:1f:2d:33:
a5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:81:4E:34:0F:B6:22:42:CB:94:39:AB:B0:64:E9:3D:E5:05:2C:14
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:b8:39:59:fc:2c:03:38:e0:f8:a1:80:bc:fc:6a:a7:48:
d5:c6:21:b6:b3:de:46:6a:96:c8:9f:6b:cc:42:c3:b1:cb:f9:
18:4b:02:0d:20:cd:b6:a2:82:f7:01:5e:fe:c1:e8:cb:3a:e8:
cc:d2:7d:15:c3:7d:68:19:de:b0:1c:7d:7f:18:15:61:ef:dd:
25:0e:e4:b8:1a:3d:f6:2c:a2:a6:d1:c7:22:fe:95:69:86:37:
ce:c8:dd:db:66:82:c5:d7:de:e1:eb:8d:78:5c:a3:5e:b4:bd:
ad:7b:cd:40:4d:0e:5e:a7:f1:c7:51:6c:bf:36:9a:6e:cc:6f:
b4:5c:90:d6:ac:a7:a0:28:21:32:9a:28:37:4e:7d:fa:06:1d:
c4:7d:84:f4:f1:48:f3:b2:ba:09:94:1a:ed:30:c4:a7:6e:71:
38:be:eb:db:49:1d:79:18:d7:5b:2f:39:3c:1e:d5:12:0d:4d:
46:7f:e4:dd:72:e3:00:72:82:69:1c:e7:0a:bc:43:70:6b:99:
cf:aa:7e:1a:c1:6b:2e:9d:3f:46:a7:c5:52:a7:34:76:94:a1:
b3:09:e2:a7:0e:bf:f9:5a:fd:c1:f2:0a:e3:cc:df:ad:af:01:
22:c8:62:cb:4c:90:b7:83:b1:c9:a6:a7:f1:64:ed:68:be:e9:
ff:03:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:29 2025 by rpki-client